[hi](javascript:alert(1);)